This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft File: s2DwCXvkgcIbsdUchdRPZXQViqk.mft (raw, json) Hash identifier: eAka8h+4J5Rwc/XdjE5jdBDSVBs8RW8VwJYC9T986ps= Subject key identifier: E0:3D:B8:83:68:69:B2:4E:1C:8E:16:5D:7A:4F:B3:A8:EE:02:AB:70 Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9 Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9 Certificate serial: 019B2EFA0879C5D29B6AD3AF0F2E9136934B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft Manifest number: 07F3 Signing time: Thu 18 Dec 2025 01:01:36 +0000 Manifest this update: Thu 18 Dec 2025 01:01:36 +0000 Manifest next update: Fri 19 Dec 2025 01:01:36 +0000 Files and hashes: 1: JIUfJiSMwwRhLhXhNFBhDMd2oXs.roa (hash: o+w9uCPhfVsnCQk8/ZFs5vyGrQvgAaes0qJUqUvPv88=) 2: XJdcwddEgs-q78gmSagWMovn85I.roa (hash: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=) 3: eRE1hc1OAUXn9B2yIqa6q1KtEng.roa (hash: 2kkOJHVByX9Ad1TRTPwMrwhabgTLNmB9YR0YC04Cis4=) 4: s2DwCXvkgcIbsdUchdRPZXQViqk.crl (hash: 2vSyyZIMg2qSZRhgLp581bEHB526zuP3TyHrEK2gqY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:08:79:c5:d2:9b:6a:d3:af:0f:2e:91:36:93:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9 Validity Not Before: Dec 18 01:01:36 2025 GMT Not After : Dec 19 01:01:36 2025 GMT Subject: CN=e03db8836869b24e1c8e165d7a4fb3a8ee02ab70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:4b:b0:57:cd:82:d6:9c:6c:56:2d:18:6f: ba:88:32:0f:26:c8:16:57:2a:2f:77:cd:fe:ed:1b: fb:c4:36:80:ec:f1:5d:1f:ec:e9:08:3a:20:08:a3: cf:99:11:1b:d7:c5:81:c7:d0:53:47:1b:87:5f:aa: b6:a7:51:22:25:5f:eb:83:75:a6:12:61:c9:96:0c: b5:e8:e9:d3:7a:e2:9b:fd:aa:89:be:41:a0:5e:f8: 1e:e3:a6:cf:3a:77:ff:f7:5d:f6:34:73:e5:7c:27: 86:66:d8:68:c2:04:bd:14:b0:47:62:42:18:a3:a6: 92:c2:01:40:18:af:55:ab:e9:b5:7f:f8:2f:2b:ee: d5:a8:20:c7:f8:21:ad:c1:36:43:b6:04:9e:e3:86: 88:54:74:a9:5e:c2:45:6a:96:49:5a:63:d7:4b:02: db:61:14:da:4f:56:03:bf:0a:e2:d5:13:36:aa:61: 86:f7:32:a8:46:99:e7:74:89:06:11:b6:84:3a:19: da:18:1f:45:eb:e6:66:ff:a7:93:a4:40:33:3f:cf: 58:28:7a:f7:49:23:70:ed:9e:98:f1:e4:03:db:05: 40:77:2e:5d:a6:bf:e2:82:8e:49:5f:7b:65:3a:53: 61:91:eb:67:4d:b3:eb:55:0f:cd:56:44:a7:64:2b: 82:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3D:B8:83:68:69:B2:4E:1C:8E:16:5D:7A:4F:B3:A8:EE:02:AB:70 X509v3 Authority Key Identifier: keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:2b:61:e4:53:71:86:6e:e9:5f:31:60:78:ff:d2:c6:6e:90: 01:e9:d6:a1:92:c0:bd:25:9b:76:bb:fb:96:47:43:ee:a7:75: 68:14:71:6a:d8:5b:be:df:46:71:8e:e5:a0:4d:48:c1:1c:37: fd:3c:4b:3e:b1:9e:2b:c3:2a:3f:06:dc:8c:f4:4b:19:48:50: cf:99:63:f4:13:4f:4e:a3:19:c2:db:2d:20:81:87:6e:17:7c: ff:d8:b5:0f:eb:d1:66:d6:9f:c4:f4:06:56:64:7b:ad:fa:c2: d7:9f:67:b2:2f:20:f9:c4:bb:c2:2a:77:e7:6c:98:7e:44:a8: 10:a6:d6:4c:41:d3:7b:54:3a:92:02:84:96:78:67:3f:76:aa: f1:94:1e:a6:50:ea:10:b2:6b:20:6c:bc:99:0e:95:7c:f4:41: 9a:24:35:c2:fd:3e:63:d1:e1:1a:e4:33:9d:35:0c:ef:51:0d: d6:06:8a:7d:c9:f2:d3:d3:ba:b7:55:aa:45:0f:43:1c:17:37: c4:76:3c:9d:46:ea:bb:61:e3:87:0e:d9:38:99:d0:ac:ac:b6: bc:22:47:a1:76:d5:03:23:e1:ad:1e:86:d9:20:ea:28:32:1a: 74:70:fe:76:77:70:26:d8:fa:05:0f:47:64:e5:2b:ba:87:3c: 28:e4:76:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+gh5xdKbatOvDy6RNpNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNjBmMDA5N2JlNDgxYzIxYmIxZDUxYzg1ZDQ0ZjY1NzQx NThhYTkwHhcNMjUxMjE4MDEwMTM2WhcNMjUxMjE5MDEwMTM2WjAzMTEwLwYDVQQD EyhlMDNkYjg4MzY4NjliMjRlMWM4ZTE2NWQ3YTRmYjNhOGVlMDJhYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy19LsFfNgtacbFYtGG+6iDIPJsgW Vyovd83+7Rv7xDaA7PFdH+zpCDogCKPPmREb18WBx9BTRxuHX6q2p1EiJV/rg3Wm EmHJlgy16OnTeuKb/aqJvkGgXvge46bPOnf/9132NHPlfCeGZthowgS9FLBHYkIY o6aSwgFAGK9Vq+m1f/gvK+7VqCDH+CGtwTZDtgSe44aIVHSpXsJFapZJWmPXSwLb YRTaT1YDvwri1RM2qmGG9zKoRpnndIkGEbaEOhnaGB9F6+Zm/6eTpEAzP89YKHr3 SSNw7Z6Y8eQD2wVAdy5dpr/igo5JX3tlOlNhketnTbPrVQ/NVkSnZCuCJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOA9uINoabJOHI4WXXpPs6juAqtwMB8GA1UdIwQY MBaAFLNg8Al75IHCG7HVHIXUT2V0FYqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYt NWEzNjEyMzUyYjM3LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80YWE1YTctOGJlYy00MjQ3LWExNWYtNWEzNjEyMzUyYjM3 LzEvczJEd0NYdmtnY0lic2RVY2hkUlBaWFFWaXFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSth5FNx hm7pXzFgeP/Sxm6QAenWoZLAvSWbdrv7lkdD7qd1aBRxathbvt9GcY7loE1IwRw3 /TxLPrGeK8MqPwbcjPRLGUhQz5lj9BNPTqMZwtstIIGHbhd8/9i1D+vRZtafxPQG VmR7rfrC159nsi8g+cS7wip352yYfkSoEKbWTEHTe1Q6kgKElnhnP3aq8ZQeplDq ELJrIGy8mQ6VfPRBmiQ1wv0+Y9HhGuQznTUM71EN1gaKfcny09O6t1WqRQ9DHBc3 xHY8nUbqu2Hjhw7ZOJnQrKy2vCJHoXbVAyPhrR6G2SDqKDIadHD+dndwJtj6BQ9H ZOUruoc8KOR2qQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:24:13 2025 by rpki-client